Documentationbreadcrumb arrow Grafana documentationbreadcrumb arrow Developer resourcesbreadcrumb arrow Grafana MCP serverbreadcrumb arrow Configurebreadcrumb arrow Server TLS
Enterprise Open source

Server TLS (streamable-http)

When you use the streamable-http transport, you can serve the MCP server over HTTPS using your own TLS certificate and key.

What you’ll achieve

Clients connect to the server with https:// instead of http://. This is separate from client TLS, which configures how the server connects to Grafana.

Before you begin

  • A TLS certificate and private key for the host and port where the server will listen.
  • The server run with -t streamable-http.

Configure server TLS

Use these flags with streamable-http:

  • –server.tls-cert-file – Path to the server TLS certificate file.
  • –server.tls-key-file – Path to the server TLS private key file.

Example:

Bash 
mcp-grafana -t streamable-http \
  --server.tls-cert-file /path/to/server.crt \
  --server.tls-key-file /path/to/server.key \
  --address :8443

Clients then connect to https://localhost:8443 with the streamable-http path (default --endpoint-path is /mcp, for example https://localhost:8443/mcp).

Next steps